WO 2005/004406 



PCT/SE2003/001882 



1/8 




Fig. 1 



UE 




AP 




WSN 



AS 



HTTP for web login 



->• 



RADIUS 



Fig. 2 



UE 




AP 




WSN 



AS 



EAPOL/ 
802. IX 



RADIUS 



Fig. 3 



WO 2005/004406 



PCT/SE2003/001882 



2/8 



STA1 



AP1 



AP2 



WSN 



AS 



50 open 
web browser 



57 enter 
user r ame 
password 



21 -Auth. req. 



23 -Auth. res. 



25 -Assoc. req. 
► 



27 - Assoc. res. 



53 



r-HTTP Get 



55 



- HTTP [login pagfe] 



59 



61 



-HTTP [username 



- HTTP session window 



password] 



65 oper 



67 - HTTP [lockout message] 



63 start accouning 



traffic 



69 - Lock out req 



71 - Lock out 



53 - account null 



Fig. 4 - prior art 



WO 2005/004406 



PCT/SE2003/001882 



3/8 



STA1 




AP1 




AP2 




WSN 




AS 



to 

CO 
CO 



3l 
CO 



CM 
O 
00 



c 
o 

I 

c 

CO 
X 

§ 

00 



CO 
CO 
CO 



CO 



8 

00 



CL 
CL 
< 



21 - Auth. req. 



23 - Auth. res. 



25 - Assoc. req. 



27 - Assoc. res. 



29 - Req. ID 



31 - Resp. ID 



39 - success 



43 - Ayth. req. 



33 



-RADIUS access 



35-EAP 



message exchang 



37 



- RADIUS access 



40 - open traffic 



44 - Auth. resp 


► 


< 

45 - Re-assoc. r 


* — ► 


46 - Re-assoc. r 


5Sp 


< 

51 - Disassociat* 
^ 


47 - IAPP move 
4 


49 - IAPP move 


► 



41 



confirm [context] 



req. 



es 



accept 



start charging 
► 



Fig. 5 - prior art 



WO 2005/004406 



PCT/SE2003/001882 



4/8 



STA1 




AP1 




AP2 




WSN 




AS 



115- Disassociate 



117- Disassocia 




111- IAPP move 



113- IAPP move response 



e 



105 -lack out 



107 -IAPP move 



109 -IAPP mov£ 
► 



notify 



101 - account null 



103- lock out rpq 



notify 
response 



Fig. 6 



WO 2005/004406 



PCT/SE2003/001882 



5/8 



STA1 




AP1 




AP2 




AS 



115- Disassociate 



117- Disassocia e 




125 - IAPP mov$ notify 



127 - IAPP move response 



101 - account null 



121 - IAPP move 



123 -IAPP mov£ 
► 



notify 
response 



Fig. 7 



WO 2005/004406 PCT/SE2003/001882 



6/8 



STA1 




AP1 




AP2 




WSN 




AS 




115- Disassociate 



117- Disassocia 



129-IAPP ADD 



notify (broadcast on subnet) 



101 - account null 



103 -lock out req 



Fig. 8 



WO 2005/004406 



PCT/SE2003/001882 



7/8 



131 - IAPP ADD notify (broadcast on subnet! 



115- Disassociate 



1 1 7 - Disassocia :e 



119 -lack out 
recognition 



STA1 




AP1 




AP2 




AS 



101 - account null 



105- fock out 



Fig. 9 



WO 2005/004406 PCT/SE2003/001882 



8/8 



STA1 



AP1 



83 - Start AP 



89 - Associate request 



AP2 



85 - RADIUS registration request 



87 - RADIUS registration accept 



91 - IAPP ADD 
► 



95 - IAPP ADD Notify 



APX 



notify 



93 - IAPP ADD notify (DOS attack; 

i k 



WSN/AS 



80 - RADIUIS request 



81 - reject 



Fig. 10 



